finance
Attacker drains over $7.5 million from Ethereum MEV address jaredfromsubway.eth
An attacker drained more than $7.5 million from the Ethereum address jaredfromsubway.eth by tricking the bot into approving fake trading routes. The incident occurred on or around June 20, 2026.
CoinDeskAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
Eth on or around Saturday, June 20, 2026. The attacker tricked the bot into approving fake trading routes via malicious helper contracts, then used those approvals to transfer WETH, USDC, and USDT out of the address. Blockaid said the attack exploited the bot’s automated trading logic rather than a contract bug or traditional phishing.
Over several weeks the attacker deployed dozens of fake token contracts and fake liquidity pools that mimicked WETH, USDC, and USDT. eth generated approvals for attacker-controlled helper contracts, and some of those approvals remained open, allowing the attacker to pull funds. Some of the stolen funds were sent to Tornado Cash, according to on-chain data reviewed by CoinDesk.
The incident was first publicly reported by Blockaid on or around June 20, 2026. eth has been responsible for roughly 70 percent of Ethereum sandwich attacks. Sandwich attacks cost Ethereum traders about $60 million per year, with 60,000 to 90,000 attacks per month between November 2024 and October 2025.
The address has been active since early 2023. eth sandwiched a small swap by Ethereum co-founder Vitalik Buterin. 14 million to frontrun the trade and made $4 after fees.
The exploit underscores the risk of systems that approve transactions at machine speed based on pattern recognition and profit signals, CoinDesk reported.
